Vendor
Nvidia vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 365 vulnerabilities in Nvidia: 1 in the last 7 days and 237 in the last 90 days, 17 of them critical and 0 exploited in the wild. The most recent, CVE-2026-100962, was published on 10 November 2026. 32 vulnerabilities in the last four weeks, down 77% on the four before (138). 3 critical against 1. 32 technologies have a page of their own.
- Last 7 days
- 1
- Last 90 days
- 237
- Critical, all time
- 17
- Exploited in the wild
- 0
About Nvidia
NVIDIA is a technology company that designs and manufactures graphics processing units (GPUs) and computing hardware.
Nvidia technologies
- NVIDIA GPU Display Driver74
- Nvidia Megatron-Bridge43
- Nvidia Triton Inference Server33
- Nvidia NeMo Megatron Bridge32
- Nvidia GPU Display Driver for Linux22
- Nvidia TensorRT-LLM16
- Nvidia Dynamo15
- Nvidia GPU Display Driver for Windows14
- Nvidia Infrastructure Controller for Linux14
- Nvidia Nemoclaw14
- Nvidia vGPU Virtual GPU Manager10
- Nvidia AIStore9
- Nvidia DALI7
- Nvidia Display Driver7
- Nvidia Dynamo for Linux7
- Nvidia Slurm7
- Nvidia Display Driver for Linux6
- Nvidia Nemo6
- Nvidia TensorRT6
- Nvidia Dgx Spark5
- Nvidia Dgx Spark Uefi5
- Nvidia Tesla5
- Nvidia UFM Enterprise5
- Nvidia Isaac Launchable4
- Nvidia Jetson Linux3
- Nvidia Megatron-LM3
- Nvidia NeMo Framework3
- Nvidia Nemo Speech3
- Nvidia Nvflare3
- Nvidia OpenShell for Linux3
- Nvidia TRT-LLM3
- Nvidia vGPU software3
Latest Nvidia vulnerabilities
- CVE-2026-100962: NVIDIA NeMo Export-Deploy server-side request forgery in multimodal deploymentmediumCVSS 5.3
- CVE-2026-65168: NVIDIA Slurm heap-based buffer overflow in socket handlinghighCVSS 7
- CVE-2026-65165: NVIDIA Slurm privilege escalation via arbitrary node distributionmediumCVSS 5.3
- CVE-2026-65140: NVIDIA Slurm inconsistent authorization checks in SlurmDBDmediumCVSS 5.7
- CVE-2026-65139: NVIDIA Slurm SQL injection in SlurmDBD RPCmediumCVSS 6.3
- CVE-2026-65138: NVIDIA Slurm arbitrary memory read in slurmstepd socket APImediumCVSS 6.3
- CVE-2026-65109: NVIDIA Slurm symlink resolution issue in container cleanupmediumCVSS 4.7
- CVE-2026-65108: NVIDIA Slurm heap buffer overflow in slurmstepdmediumCVSS 6.3
- CVE-2026-65160: NVIDIA nvJPEG divide-by-zero denial of servicemediumCVSS 5.5
- CVE-2026-65151: NVIDIA NeMo Agent Toolkit SQL injectionhighCVSS 8.4
- CVE-2026-65145: NVIDIA NeMo Agent Toolkit missing authentication vulnerabilitycriticalCVSS 10
- CVE-2026-65120: NVIDIA TensorRT-LLM server-side request forgeryhighCVSS 7.1
- CVE-2026-65119: NVIDIA TensorRT-LLM untrusted tokenizer loading in KvCacheAwareRouterhighCVSS 8.4
- CVE-2026-47486: NVIDIA PhysX out-of-bounds writehighCVSS 7.8
- CVE-2026-24269: NVIDIA TensorRT-LLM server-side request forgeryhighCVSS 7.1
- CVE-2026-67456: NVIDIA Warp heap buffer overflowmediumCVSS 4.4EPSS 0.1%
- CVE-2026-65180: NVIDIA Megatron-LM remote code execution in checkpoint loadinghighCVSS 7.8EPSS 0.2%
- CVE-2026-65173: NVIDIA AIStore missing authentication in token-revocation endpointcriticalCVSS 9.1EPSS 0.5%
- CVE-2026-65172: NVIDIA AIStore missing authorization in ETL management APIhighCVSS 8.6EPSS 0.4%
- CVE-2026-65170: NVIDIA AIStore server-side request forgery in HT backendhighCVSS 8.6EPSS 0.4%
- CVE-2026-65164: NVIDIA AIStore for Linux path traversal in dSort archive extractionhighCVSS 8.1EPSS 0.8%
- CVE-2026-65162: NVIDIA AIStore legacy ETL Kubernetes API code executioncriticalCVSS 10EPSS 0.7%
- CVE-2026-65161: NVIDIA AIStore path traversal in Promote APIhighCVSS 7.5EPSS 0.7%
- CVE-2026-65150: NVIDIA DALI out-of-bounds readhighCVSS 7.3EPSS 0.1%
- CVE-2026-65149: NVIDIA DALI out-of-bounds write vulnerabilityhighCVSS 7.3EPSS 0.1%
Most severe Nvidia vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-65162: NVIDIA AIStore legacy ETL Kubernetes API code executioncriticalCVSS 10EPSS 0.7%
- CVE-2026-65145: NVIDIA NeMo Agent Toolkit missing authentication vulnerabilitycriticalCVSS 10
- CVE-2026-65083: NVIDIA OpenShell for Linux incomplete input allowlist in sandbox provisioning APIcriticalCVSS 9.9EPSS 0.9%
- CVE-2026-65093: NVIDIA OpenShell for Linux sandbox escapecriticalCVSS 9.9EPSS 0.8%
- CVE-2026-24254: NVIDIA Dynamo for Linux out-of-bounds write in multimodal serving topologycriticalCVSS 9.8EPSS 0.9%
- CVE-2025-33224: NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary…criticalCVSS 9.8EPSS 0.8%
- CVE-2026-47627: NVIDIA Triton Inference Server path traversalcriticalCVSS 9.8EPSS 0.7%
- CVE-2026-53805: NVIDIA GEN3C remote code execution in inference API servercriticalCVSS 9.8EPSS 0.7%
- CVE-2025-33223: NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary…criticalCVSS 9.8EPSS 0.7%
- CVE-2025-33222: NVIDIA Isaac Launchable contains a vulnerability where an attacker could exploit a hard-coded credential issue. A…criticalCVSS 9.8EPSS 0.6%
Vulnerabilities per week
32 vulnerabilities in the last four weeks, down 77% on the four before (138). 3 critical against 1. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 8 | 1 | |
| 24 Aug 2026 | 26 | 2 | |
| 31 Aug 2026 | 30 | 0 | |
| 7 Sep 2026 | 2 | 0 | |
| 14 Sep 2026 | 1 | 0 | |
| 21 Sep 2026 | 19 | 1 | |
| 28 Sep 2026 | 116 | 0 | |
| 5 Oct 2026 | 2 | 0 | |
| 12 Oct 2026 | 18 | 2 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 6 | 1 | |
| 2 Nov 2026 | 8 | 0 | |
| 9 Nov 2026 | 1 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Nvidia vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/nvidia)<a href="https://junglewise.ai/threats/vendors/nvidia"><img src="https://junglewise.ai/threats/vendors/nvidia/badge.svg" alt="Nvidia vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/nvidia.json, and this page as text at https://junglewise.ai/threats/vendors/nvidia.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Nvidia vulnerabilities", https://junglewise.ai/threats/vendors/nvidia, 13 November 2026.